Simatic Wincc Runtime vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SW

Product

Simatic Wincc Runtime

by Siemens · last CVE Nov 8, 2022

13

CVEs

0

On KEV

9.1

Max CVSS

0

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 1High 5Medium 6Low 0

Severity

All severities13 Critical1 High5 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Simatic Wincc Runtime to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-6572	9.1	3%	May 14	A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1… Affected: before 15.1; before 15.1
CVE-2018-13814	8.8	2%	Dec 13	A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V14), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V14), SIMATIC HMI KTP… Affected: before 14.0; before 14.0
CVE-2018-13813	8.1	2%	Dec 13	A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15 Update… Affected: through 15.0; through 15.0
CVE-2021-40142	7.5	3%	Aug 27	In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access… Affected: All versions, or not specified
CVE-2018-13812	7.5	4%	Dec 13	A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15 Update… Affected: through 15.0; through 15.0
CVE-2019-10935	7.2	1%	Jul 11	A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All… Affected: 13; 13; 13; 13; 13; 14; +5 more
CVE-2022-30694	6.5	0%	Nov 8	The login endpoint /FormLogin in affected web services does not apply proper origin checking Affected: All versions, or not specified
CVE-2019-6576	6.5	2%	May 14	A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1… Affected: before 15.1; before 15.1
CVE-2016-7165	6.4	0%	Nov 15	A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software… Affected: All versions, or not specified
CVE-2019-10929	5.9	1%	Aug 13	A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl Affected: All versions, or not specified
CVE-2019-6577	5.4	1%	May 14	A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1… Affected: before 15.1; before 15.1
CVE-2017-6867	4.9	2%	May 11	A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC… Affected: 13; 14
CVE-2011-3321	–	7%	Sep 16	Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote… Affected: All versions, or not specified